Unomi-CVE-2020-13942

CVE-2020-13942 Apache Unomi Remote Code Execution Vulnerability Script Vulnerability Overview Apache Unomi is an open-source Java data platform, a Java server designed to manage data of customers, prospects, and visitors, and to help personalize customer experiences. Unomi can be used to integrat...

CVE-2017-5638-PoC

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repository contains a Proof of Concept PoC script demonstrating the Remote Code Execution RCE vulnerability identified as CVE-2017-5638 in Apache Struts 2. Vulnerability Details CVE ID: CVE-2017-5638 Affected Software: Apache Struts 2 versio...

K000163640: Apache Struts vulnerabilities CVE-2026-104711, CVE-2026-104712, CVE-2026-104713, and CVE-2026-104714

Security Advisory Description CVE-2026-104711 Improper neutralization of special elements used in an expression language statement 'Expression Language Injection' vulnerability in Apache Struts. If the application is configured to use the legacy RESTful action mapper, a crafted request can inject...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Struts Patch-Gap Auditor A small Python tool that finds Apach...

Linux Distros Unpatched Vulnerability : CVE-2026-104711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of special elements used in an expression language statement 'Expression Language Injection' vulnerability in Apache Struts. If the...

CVE-2026-104711

Apache Struts has an OGNL expression-injection vulnerability in the legacy RESTful action mapper. A crafted request to an application configured to use this mapper may lead to remote code execution. Applications using the default action mapper, the restful2 mapper, or the Struts REST plugin are n...

CVE-2026-104711

Improper neutralization of special elements used in an expression language statement 'Expression Language Injection' vulnerability in Apache Struts. If the application is configured to use the legacy RESTful action mapper, a crafted request can inject an OGNL expression that may lead to remote co...

PT-2026-106133

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.0 through 2.3.37 Apache Struts versions 2.5.0 through 2.5.33 Apache Struts versions 6.0.0 through 6.11.0 Apache Struts versions 7.0.0 through 7.3.0 Description An Expression Language Injection issue exists when the...

Exploit for CVE-2024-53667

CVE-2024-53677 — How the Exploit Works and How to Run It V...

EUVD-2022-3954

Malicious code in bioql PyPI...

SUSE CVE-2025-53192

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue, the OGNL engine parses and evaluates the provided expression with powerful capabilities,...

CVE-2025-53192

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue​, the OGNL engine parses and evaluates the provided expression with powerful capabilities...

CVE-2025-53192 Apache Commons OGNL: Expression Injection leading to RCE

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue​, the OGNL engine parses and evaluates the provided expression with powerful capabilities...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Confluence Pre-Auth Remote Code Execution via OGNL Injection...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 – Confluence OGNL injection vulnerability Sc...

SUSE CVE-2012-4387

Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service CPU consumption via a long parameter name, which is processed as an OGNL expression...

Apache Struts OGNL Injection

The vulnerability of the OGNL expression transformation class implementation in the XWork expression structure of the Apache Struts software framework is related to deficiencies in access control when using the ParametersInterceptor class with the parameter. Exploiting this vulnerability allows a...

Apache Struts OGNL Code Execution

The vulnerability of the OGNL expression transformation class implementation in the Apache Struts software framework is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

dentaku:dentaku-foundation (>=20050106.213646, <=20050113.005422), marmalade:marmalade-el-ognl (>=1.0-alpha2, <=1.0-alpha-3) +12 more potentially affected by CVE-2016-3093 via ognl:ognl (2.5.1)

ognl:ognl MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on ognl:ognl and may be impacted: - dentaku:dentaku-foundation =20050106.213646, =1.0-alpha2, =1.0-alpha-1, =1.0-beta-8, =1.0-beta-1, =1.0-beta-3, =1.0-beta-5, =1.0-beta-6 Sourc...

br.com.caelum.stella:vraptor-validator-example (>=2.0-beta1, <=2.2.2), br.com.caelum.vraptor:vraptor-environment (1.0.1) +178 more potentially affected by CVE-2016-3093 via ognl:ognl (2.7.3)

ognl:ognl MAVEN version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on ognl:ognl and may be impacted: - br.com.caelum.stella:vraptor-validator-example =2.0-beta1, =1.0.1, =1.0.0, =1.0.1, =3.1.1, =1.0.0, =1.0.0, =1.0.0, =1.5.2 -...